CHP 11-99 Foundation Data Breach

On or about September 16, 2025, a staff member of the CHP 11‑99 Foundation received a suspicious email and forwarded it to their external service provider’s Help Desk for review. The Help Desk incorrectly informed the staff member that the link in the email was “clean.” After clicking the link, the staff member’s email account was compromised. The incident was later detected on or about September 24, 2025, when the attacker attempted to use the compromised account to phish the same Help Desk.

Following the discovery, CHP 11‑99 Foundation conducted an investigation and confirmed that the attacker had full access to the staff member’s email account, including all folders, emails, and any documents attached or stored within the account. These documents included sensitive materials such as membership applications, merchandise orders, and payment forms.

The Foundation immediately took steps to secure its systems, including working with incident response vendors, hardening security protocols, enabling multifactor authentication, and initiating password resets. They also began transitioning away from their existing IT and security service provider.

To assist impacted individuals, CHP 11‑99 Foundation is offering complimentary 12‑month credit monitoring, identity theft restoration, and fraud consultation services through Kroll.

The CHP 11‑99 Foundation is a nonprofit organization established in 1982 that supports California Highway Patrol employees and their families.

The compromised data relates to individuals whose personal and financial information was stored within the affected staff member’s email account.

If you received a Data Breach notification letter from CHP 11‑99 Foundation, it confirms that your personal information may have been accessed by an unauthorized actor.

What information is involved in the CHP 11-99 Foundation Data Breach?

Compromised information may include:

Your Personally Identifiable Information (PII) includes any data that can identify you, such as your name, address, government ID numbers, or financial details. Organizations that collect this information must protect it under state and federal laws. When PII is compromised, victims are at heightened risk of identity theft and financial fraud.

The breach also may include Protected Health Information (PHI) if any medical‑related documents were stored within the affected email account. PHI is protected under HIPAA and state privacy regulations. Exposure of PHI increases risks of medical fraud, insurance fraud, and unauthorized use of your health data.

If your information was included in the compromised email account, one of the most important steps you can take is to enroll in the free Kroll credit and identity monitoring services and continue reviewing your financial accounts for suspicious activity.

Anyone affected should also consider placing a fraud alert or security freeze on their credit reports. The CHP 11‑99 Foundation’s notification includes instructions and contact information for Equifax, Experian, and TransUnion to assist individuals with these protections.

California residents benefit from additional protections under the California Consumer Privacy Act (CCPA), which grants specific rights related to the handling and safeguarding of personal information. They may also have further legal remedies when personal or financial information is compromised.

If you received a NOTICE OF DATA BREACH letter from the CHP 11‑99 Foundation, your personal and financial information may be at risk. This information can be misused by cybercriminals for identity theft, fraudulent purchases, loan applications, or other harmful activities.

Contact the Data Breach Lawyers at Emery | Reddy, PC for a Free Case Review today.